spam detected but not tagged

Julian Field MailScanner at ecs.soton.ac.uk
Thu Mar 2 11:05:52 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----


On 2 Mar 2006, at 10:14, Dave Strydom wrote:

> I have an idea (it may be stupid though)
>
> Correct me if I am wrong but, If a message gets a hit from the
> spamassassin.cache.db then it is definately spam?

No, it caches negative results (briefly) too.

> If the above is right, can you do not put a additional check in the
> code, that check if the message got a spam hit from the
> spamassassin.cache.db, and if it did mark it as spam (regard of the
> output it gets from the hit)
>
> Because as you see from this:
>
> Feb 28 09:05:42 Cerberus MailScanner[22928]: SpamAssassin cache hit
> for message 1FDyvT-0006SE-Nn
> Feb 28 09:05:42 Cerberus MailScanner[22928]: Message 1FDyvT-0006SE-Nn
> from 220.104.253.235 (cleopatr at akeva.com) to xxxxxxxxxx.com is not
> spam,
>
> It got a hit from the database, (this is where it gets the score of 19
> or whatever) but then mailscanner says it's not spam. Could you not
> code it so it does this: "
>
> if spamassassin cache hit then
> is definately spam.
>
> or am I way off the ball here?
>
> Dave
>
>
> ==================
> On 3/2/06, Dave Strydom <strydom.dave at gmail.com> wrote:
>> yeah this is related to the same problem as mine (just checked the
>> headers of those messages)
>>
>> Dave
>>
>> On 3/2/06, Julian Field <MailScanner at ecs.soton.ac.uk> wrote:
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>
>>> I think this is another Perl bug, I've seen this exact behaviour
>>> several times before. The problem is that I cannot reproduce it and
>>> so I'm not sure where to put the workaround.
>>>
>>> On 2 Mar 2006, at 09:06, Erik van der Leun wrote:
>>>
>>>>
>>>>
>>>> X-MailScanner-Spamcheck: geen spam, X-MailScanner-SpamScore: 17
>>>>
>>>> This is really all it writes about spam in headers...
>>>> It detects, but doesn't take action...
>>>>
>>>> I //solved// the matter by disabling SA cache by the way...
>>>>
>>>> Thanks
>>>>
>>>> On Tue, 28 Feb 2006, shuttlebox wrote:
>>>>
>>>>> On 2/28/06, Erik van der Leun <evanderleun at hal9000.nl> wrote:
>>>>> Hi,
>>>>>
>>>>> Another issue I fail to understand...
>>>>>
>>>>> Since I've recently upgraded MailScanner to 4.50.15.1 and added
>>>>> pyzor, razor2 checks, it sometimes occurs that spam is detected
>>>>> well, but not tagged as spam.
>>>>>
>>>>> In the mailheaders, I even see the spamscore, but the mail is
>>>>> not treated as spam... just sent through the regular way.
>>>>>
>>>>> No spam subject tag is added either.
>>>>>
>>>>> Any thoughts?
>>>>
>>>> Post some headers and maybe some log snippets, otherwise it's hard
>>>> to help.
>>>>
>>>> --
>>>> /peter
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>
>>> - --
>>> Julian Field
>>> www.MailScanner.info
>>> Buy the MailScanner book at www.MailScanner.info/store
>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>
>>>
>>> -----BEGIN PGP SIGNATURE-----
>>> Version: PGP Desktop 9.0.5 (Build 5050)
>>>
>>> iQEVAwUBRAa3bvw32o+k+q+hAQFi7gf+LtYg2RiXrU9UoiUxuCAXA7hFpjC3myvp
>>> PztKGD5eR4ugCLVgUtbnNxW/SopngLMsNr52sq7wcebMfFBRlGFNcKnV1TBb9KNA
>>> RsVGoqCkNdF1XgyvKx18rOAAm31/wWCh8Cf+R5F1IbJo36uRYbR3uRvHu1P+VREo
>>> /VgQp3h35XlnJBVnCr50NpHG7pM6h+LXf353qOorlOKDmmF3NZjnkf1ly59LLY7z
>>> fRvoccgy3dw/+LXJzeky07bzoE0Cv2PXs6FrGeCB6himnDfxv5eoWAy8OL73Tgci
>>> bn/vkBRiVS31JXU1byf9pZiAcFWhAFYEaCu9LCvCpluP96MoYGGpBg==
>>> =9NCk
>>> -----END PGP SIGNATURE-----
>>>
>>> --
>>> This message has been scanned for viruses and
>>> dangerous content by MailScanner, and is
>>> believed to be clean.
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.5 (Build 5050)

iQEVAwUBRAbRkfw32o+k+q+hAQG/9Qf9EAMWyAyQHJlgzqc8Je/k5RaabY3j3hlN
5mg1wIDtgfrvea8eLKORXXDCWr+S6YBSxWdiSHKw3PTXAu6feKR8Ccw3rvLNuAXk
qC+qf7q9Ux/5Kr2CuXG8N6YLZniazcvgzQNI31BGm3/aMuDL+yLY6Z49UziBt4RG
z78MoI2Y7RQXlH5zjIHgcwlVu35LAhEpG+OE+uqr6hNYD+wADzEBrIApVHP9sYuq
pyDBc6aBfRqvYedbKoNXvrNSm6TLt3g84bW7ggXFiAlE6bH77IWBG7xCKMs/Fafm
Q04cC15JTdjIytaA6EF5e9e2cgzttSNCGFKN042aVAGRUAMOS6QcZg==
=MLCZ
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list